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CLAIMS 

1. A circuit design method executed by a computer 
for designing a processing circuit for processing on a 
finite field comprising: 

a first step of obtaining a first primitive 
root ai on the basis of a first polynomial for a first 
extension from a first finite field to a second finite 
field; 

a second step of obtaining a second primitive 
root a2 on the basis of a second polynomial for a second 
extension from said second finite field to a third finite 
field, in which a coefficient of a 0-th term is defined 
using said first primitive root ai obtained in said first 
step and the coefficient of the 0-th term of said first 
polynomial ; 

a third step of defining the processing on said 
third finite field using a base expressed using said 
second primitive root 02 obtained in said second step; 
and 

a fourth step of designing a processing circuit 
for the related processing on the basis of the processing 
defined in said third step. 

2. A circuit design method as set forth in claim 1, 
wherein when: 

said first finite field is an extension of an 
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extension order n from a finite set Fq, 

said second finite field is a first extension 
of an extension order li from said first finite field, 

said third finite field is a second extension 
5 of an extension order I2 from said second finite field, 
and 

defining the processing on said third finite 
field shown by the following (1-2) of the order shown by 
the following (1-1) in the third step, the method 
10 obtains said first primitive root ai on the 

basis of the following (1-3) in the first step and 

obtains said second primitive root 0.2 on the 
basis of the following (1-4) in the second step: 

(J (<I=P™/ prime number, n, li, I2, m: 

15 natural numbers) (1-1) 

L: = F^niji2 (1-2) 

a^al' - + c = 0, X^' - A" + c e FlX"], Irreducible 

(1-3) 

a^\a!^ - ^ = 0, a = c'^ - 3 i e 

S.t.X^' - X + a e K[X'\, irreducible 

20 (1-4) 

3. A circuit design method as set forth in claim 2, 
wherein. 



when said extension orders li and I2 are both q, 

the method 

obtains said first primitive root ai on the 

basis of the following (1-5) , . (l-5a) in the first step 
and 

obtains said second primitive root as on the 

basis of the following (1-6) in the second step: 

a^a^ - + c = 0, 3 c e Fs.t.Tr^^ {c) ^ 0 

(1-5) 
(l-5a) 

a^: - 3 = 0, 3a = c"' • a I e K, 

I. 

(1-6) 

4. A circuit design method as set forth in claim 1/ 
further comprising: 

defining processing on said third finite field 
using processing on said second finite field in said 
third step and 

designing a first processing circuit for 
processing on said second finite field used in said third 
step and designing a second processing circuit for 
processing on said third finite field using said first 
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processing circuit. 

5. A circuit design method as set forth in claim 4, 
further comprising defining processing on said third 

finite field using processing on said second finite field 
multiplying a coefficient of the 0-th term of said second 
polynomial in said third step. 

6. A circuit design apparatus for designing a 
processing circuit for processing on a finite field 
comprising: 

a first means for obtaining a first primitive 
root ai on the basis of a first polynomial for a first 
extension from a first finite field to a second finite 
field; 

a second means for obtaining a second primitive 
root oi2 on the basis of a second polynomial for a second 
extension from said second finite field to a third finite 
field, in which a coefficient of a 0-th term is defined 
using said first primitive root ai obtained by said first 
means and the coefficient of the 0-th term of said first 
polynomial ; 

a third means for defining processing on said 
third finite field using a base expressed using said 
second primitive root olz obtained by said second means; 
and 

a fourth means for designing a processing 



circuit for the related processing on the basis of the 
processing defined by said third means. 

7. A program executed by the circuit design 
apparatus for designing a processing circuit for 
processing on a finite field comprising: 

a first routine of obtaining a first primitive 
root ai on the basis of a first polynomial for a first 
extension from a first finite field to a second finite 
field; 

a second routine of obtaining a second 
primitive root 0.2 on the basis of a second polynomial for 
a second extension from said second finite field to a 
third finite field, in which a coefficient of a 0-th term 
is defined using said first primitive root ai obtained in 
said first routine and the coefficient of the 0-th term 
of said first polynomial ; 

a third routine of defining processing on said 
third finite field usxng a base expressed using said 
second primitive root a2 obtained in said second routine; 
and 

a fourth routine of designing a processing 
circuit for the related processing on the basis of the 
processing defined in said third routine. 



